Silk Road forums

Discussion => Security => Topic started by: goldenGiraffe on January 16, 2013, 04:19 am

Title: Does it matter which Version: GnuPG ??
Post by: goldenGiraffe on January 16, 2013, 04:19 am

Quick newb question about encrypting a message w/ GNU Privacy Assistant....

Does it matter if I have a more updated GNU version than the vendor's while encrypting with his PGP key?

Thanks!

Title: Re: Does it matter which Version: GnuPG ??
Post by: scout on January 16, 2013, 04:23 am

No, that shouldn't matter.

Title: Re: Does it matter which Version: GnuPG ??
Post by: goldenGiraffe on January 16, 2013, 04:49 am

[Resolved] !

Thanks for the quick reply.  :)

Title: Re: Does it matter which Version: GnuPG ??
Post by: Nightcrawler on January 18, 2013, 04:27 pm

Quote from: goldenGiraffe on January 16, 2013, 04:19 am

Quick newb question about encrypting a message w/ GNU Privacy Assistant....

Does it matter if I have a more updated GNU version than the vendor's while encrypting with his PGP key?

Thanks!

As a general rule, you shoudl be running the latest versions, as they have the latest bug-fixes.

The latest version of the 1.4.x series is 1.4.13.  The latest addition to this version is the IDEA cipher (used in the earliest versions of PGP), the patent on which expired about a year ago.

The latest version in the 2.0.x series is 2.0.19.

I would strongly advise against running a version of 1.4.x earlier than 1.4.10;  for the 2.0.x I would regard the minimum version as 2.0.17.

Versions to be absolutely avoided:

I would avoid any of the following versions of PGP: 2.x, 6.x, 8.x.  All of these are seriously outdated, using obsolete key formats. They also place heavy reliance on the MD5 hash algorithm, which should now be considered broken.

Nightcrawler <Nightcrawler@SR>
PGP-Key: 4096R/BBF7433B 2012-09-22
Key fingerprint = D870 C6AC CC6E 46B0 E0C7 3955 B8F1 D88E BBF7 433B
PGP Key: http://dkn255hz262ypmii.onion/index.php?topic=174.msg633090#msg633090